On 12/02/2019 18:40, Florian Westphal wrote: >> BTW: why SYNPROXY is useless nowadays? > > TCP stack was changed to allow lockless handling of listening socket > lookups, so there is no point in using conntrack + synproxy to avoid > that lookup cost. > I see: https://lwn.net/Articles/659199/ Thanks for the info.
Attachment:
signature.asc
Description: OpenPGP digital signature
